WHAT IS CLAIMED IS: 

1 . A traffic monitoring system comprising: a plurality 
of active monitors each tapping a physical line on a network 
and analyzing traffic; and a manager collecting analysis 
results from said active monitors, respectively, wherein 

said manager comprises: 

means for loading a management application program for 
managing the respective active monitors to the manager 
itself; 

means for executing said management application 
program; 

means for delivering a traffic analysis program to each 

of said active monitors; and 

means for communicating with said active monitors, 

each of said active monitors comprises: 

means for loading the traffic analysis program 

delivered from said manager to the active monitor itself; 
means for executing said traffic analysis program; and 
means for communicating with said manager, and wherein 
each of said active monitors provides a traffic analysis 

result to said manager through said communication means in 

response to a request from said manager. 

2. A traffic monitoring system according to claim 1, 
wherein 
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said manager further comprises means for unloading said 
management application program. 

3. A traffic monitoring system according to claim 1, 
wherein 

each of said active monitors further comprises means 
for unloading said traffic analysis program in response to 
a request from said manager. 

4 . A traffic monitoring method comprising: a plurality 
of active monitors each tapping a physical line on a network 
and analyzing traffic; and a manager collecting analysis 
results from said active monitors, respectively, the method 
comprising the steps of: 

allowing said manager to load and execute a management 
application program; 

allowing said manager to request said active monitors 
to load a traffic analysis program; 

allowing said active monitors to load and execute the 
traffic analysis program in response to said load request; 

allowing said manager to request the active monitors 
to collect analysis results; and 

allowing said active monitors to provide the analysis 
results to the manager in response to said request, 
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respectively. 



5. A traffic monitoring method according to claim 4, 
further comprising the steps of: 

allowing said manager to request said active monitor 
to unload said traffic analysis program; and 

allowing said active monitors to unload the traffic 
analysis program in response to said unload request. 

6. A traffic monitoring method according to claim 5, 
further comprising a step of allowing said manager to unload 
the management application program from the manager itself . 

7. A traffic monitoring system according to claim 4, 
wherein 

said manager holds topology information concerned 
about the respective active monitors on a network, and 
manages traffic based on the analysis results collected from 
said respective active monitors and said topology 
information . 



8. A traffic monitoring system according to claim 4, 
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further comprising a step of changing operation parameters 
for the traffic analysis program, the traffic analysis 
program now being executed by each of the active monitors . 

9 . A traffic monitoring system according to claim 4 , 
wherein 

each of said active monitors identifies a packet and 
a protocol under control of said traffic analysis program. 
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